Quote:
I run a lot of penetration testing exercises against client networks and systems. A lot of the time, testing is relatively straightforward, as the network administrator is not filtering ICMP traffic, and my network scans are not proactively blocked. I love this type of testing, as it's easy and quick to undertake.
Quote:
What I don't like, however, is when security-conscious administrators lay down a number of hurdles between me and the target systems. In these situations, a test that would usually take two days to undertake now takes a week's worth of my time! By laying down such hurdles, you can force attackers (and security consultants) to go to much more effort in trying to map your networks, identify services, and applications, and effectively attack and compromise them.
Quote:
This article is a breakdown of my top ten tips for all network administrators, to protect your networks from oppurtunistic threats and make it hard for the more determined attackers to get anywhere fast.
Well that is the primer. For the actual relavent bit of the article you will have to follow the link as my RPC service is stuffed and I cannot copy and past (yes typed all the quotes in) :)